Near-field communications and routing

ABSTRACT

Near-field communications (NFC) with NFC reader devices are facilitated. In accordance with one or more embodiments, an apparatus includes a NFC circuit that wirelessly communicates with different types of local NFC readers using an NFC protocol, a host circuit having one or more modules that communicate with one of the types of local NFC readers via the NFC circuit, and second (e.g., secure) modules that respectively communicate with a specific one of the different types of local NFC readers, also via the NFC circuit, using secure data stored within the second module. A routing circuit is responsive to an NFC communication received from a specific one of the NFC readers, by identifying one of the first and second modules that communicates with the specific one of the NFC readers, and routing NFC communications between the specific one of the NFC readers and the identified one of the modules.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims the priority under 35 U.S.C. §119 of Europeanpatent application no. 13290042.4, filed on Mar. 5, 2013, the contentsof which are incorporated by reference herein.

BACKGROUND

Aspects of various embodiments are directed to near-field communications(NFC), and to effecting such communications by routing different typesof communications to specific secure components.

Wireless communication circuits are widely used in local communicationsfor a variety of applications benefiting from the secure or otherwiseprotected communication of data. For instance, portable devices such astelephones, tablets and others can be used to communicate wirelesslywith a variety of other communication circuits. Other types of wirelesscommunication circuits are used to control access, or enable operationof other circuits (e.g., in vehicles). These and other implementationscan be useful in a variety of manners.

One particular type of wireless communication in which the security ofcommunicated data is important involves the contactless communication ofinformation, such as for authentication or payment authorization. Forsuch communications, various requirements/specifications have beenimplemented to define the manner in which such data is to becommunicated. Mobile devices carrying out such applications may includea wireless communication circuit, such as a radio frequency (RF)interface circuit, that operates in connection with a micro controllerto execute particular functions.

To facilitate secure wireless communications, applets (executablemodule/code) have been used within portable devices, such as within amobile phone host, together with an RF interface. These applets areoften implemented in what has been referred to as a secure element,which is a circuit-based element that carries out the functions of theapplet. Such communications are often carried out using NFC, which canrequire a relatively short distance (e.g., 20 centimeters) between thedevice and a terminal with which the device communicates.

SUMMARY

While these approaches to communications are useful, theirimplementation has been limited in various contexts. For instance, thestorage of information useful for various purposes can be difficult toachieve in a secure manner. Moreover, different types of NFCcommunications can employ different protocols or other communicationrequirements. These and other matters have presented challenges to theimplementation of NFC.

Various example embodiments are directed to NFC circuits and theirimplementation, as well as to methods, apparatuses and systems involvingNFC circuits.

According to an example embodiment, an apparatus includes a wirelesscommunication circuit that sends/receives over-the-air communicationsusing a message-exchange protocol having signaling, authentication, andboth error detection and correction capabilities for interpretingmessages sent and received via the over-the-air communications. Anear-field communication (NFC) circuit wirelessly communicates with aplurality of different types of local NFC readers using an NFC protocolthat is different than the message-exchange protocol. A user interfacepresents data to a user of the apparatus, and a first (e.g.,processor-type) circuit communicates with remote transceivers via thewireless communication circuit and presents data pertaining to the localNFC readers to a user via the user interface. The first circuit alsocommunicates with the NFC circuit to provide an authorization forcommunications with one of the NFC readers, in response to a user inputreceived via the user interface. A plurality of second circuits (e.g.,secure-type circuits) communicate with a specific one of the types oflocal NFC readers via the NFC circuit, using secure data stored withinthe second circuit and inaccessible to the first circuit, with differentones of the second circuits communicating with different ones of thetypes of NFC readers. A routing circuit is responsive to NFCcommunications received from a specific one of the NFC readers byidentifying one of the second circuits that communicates with thespecific one of the NFC readers, and routing NFC communications betweenthe specific one of the NFC readers and the identified one of the secondcircuits.

Another example embodiment is directed to an apparatus having a NFCcircuit, host circuit having one or more first modules, a routingcircuit and a plurality of second modules. The NFC circuit wirelesslycommunicates with a plurality of different types of local NFC readersusing an NFC protocol, and each first module in the host circuitcommunicates with one of the different types of local NFC readers viathe NFC circuit. Each second module also communicates with a specificone of the different types of local NFC readers via the NFC circuit, anddoes so using secure data that is stored within the second module andinaccessible by the host circuit. Different ones of the second modulescommunicate with different types of the NFC readers. The routing circuitis responsive to NFC communications received from a specific one of theNFC readers by identifying one of the modules that communicates with thespecific one of the NFC readers, and routing NFC communications betweenthe specific one of the NFC readers and the identified one of themodules.

Another example embodiment is directed toward a method includingcommunications via an NFC protocol, with an apparatus including aplurality of first modules and a host circuit having second modules.Each of the modules is operable to communicate with a specific one of aplurality of different types of local NFC readers that is different thana type of local NFC reader for which the other modules are operable tocommunicate with. In response to an NFC protocol communication receivedfrom a specific one of a plurality of different types of local NFCreaders, one of the first and second modules that communicate with thespecific one of the NFC readers is identified. In response to theidentification of one of the second modules, secure data that isproprietary to the identified second module is accessed and used, whileprohibiting access to the secure data by the host circuit. NFCcommunications are routed between the specific one of the NFC readersand the identified one of the modules via an NFC circuit, using the NFCprotocol and accessed secure data stored within the accessed module(e.g., within the first modules, or that within the second modules whichis inaccessible by the host circuit).

BRIEF DESCRIPTION OF DRAWINGS

Various example embodiments may be more completely understood inconsideration of the following detailed description in connection withthe accompanying drawings, in which:

FIG. 1 shows an apparatus and approach for near-field communications(NFC) involving routing between different secure elements in an NFCdevice, in accordance with one or more example embodiments;

FIG. 2 shows an NFC apparatus, in accordance another example embodiment;

FIG. 3A shows an NFC apparatus with a first routing state, in accordanceanother example embodiment;

FIG. 3B shows the NFC apparatus in FIG. 3B with a second routing state,in accordance another example embodiment; and

FIG. 4 shows a flow diagram for NFC communications, in accordance withanother example embodiment.

DETAILED DESCRIPTION

While various embodiments discussed herein are amenable to modificationsand alternative forms, aspects thereof have been shown by way of examplein the drawings and will be described in detail. It should beunderstood, however, that the intention is not to limit the invention tothe particular embodiments described. On the contrary, the intention isto cover all modifications, equivalents, and alternatives falling withinthe scope of the disclosure including aspects defined in the claims. Inaddition, the term “example” as used throughout this application is onlyby way of illustration, and not limitation.

Aspects of the present disclosure are believed to be applicable to avariety of different types of apparatuses, systems and methods involvingNFC, and to NFC circuits. While not necessarily so limited, variousaspects may be appreciated through a discussion of examples using thiscontext.

Various aspects are directed to methods, apparatuses, systems andnon-transitory media involving the management of multiple secureelements (e.g., components) for NFC communications with an externalreader. An NFC controller routes contactless communication between anNFC antenna and one of the multiple secure elements, based upon a typeof NFC reader circuit or circuit module and the related communicationrequirements therefor. Accordingly, various embodiments are directed toNFC controller management of several secured elements (e.g., universalintegrated circuit card (UICC) proprietary secured elements) and/orproviding card emulation functionalities to a host processor on a devicehosting the secured elements, such as a processor in mobile telephone,laptop, tablet, media device or other circuit.

Various embodiments are directed to methods for operation with, and/orincluding an apparatus having a plurality of secure modules and a hostcircuit that also includes modules, in which each of the modules isoperable to communicate with a specific one of a plurality of differenttypes of local NFC readers (e.g., each module communicates with aspecific reader type that is different than reader types that the othermodules communicate with). When an NFC protocol communication isreceived from a specific one of a plurality of different types of localNFC readers, one of the modules that is configured and arranged tocommunicate with the specific one of the NFC readers is identified. NFCcommunications are routed between the specific one of the NFC readersand the identified one of the modules via an NFC circuit, using the NFCprotocol and secure data stored within the module. When the identifiedmodule is a secure module, secure data that is proprietary to theidentified secure module is used while mitigating/prohibiting access tothe secure data by the host circuit.

Such approaches may, for example, be implemented with a host circuitthat wirelessly communicates over-the-air communications using amessage-exchange protocol that is different than the NFC protocol. Sucha message-exchange protocol may include signaling, authentication, anderror detection and correction capabilities for interpreting messagessent and received via the over-the-air communications. Thesecommunications may, for example, involve Wi-Fi, cellular telephone,Bluetooth, satellite and other communications types. In someimplementations, the host circuit also provides data to a user via auser interface, such as a screen on a mobile telephone. User inputs canbe provided and used to authorize communications from the modules, suchas to authorize the communication of proprietary data (e.g., paymentdata).

In accordance with a more particular embodiment, an apparatus includesan over-the-air (e.g., cellular/Wi-Fi) communication circuit, a NFCcommunication circuit, a user interface, a host processor, a pluralityof secure modules, and a routing circuit. The over-the-aircommunications circuit uses a first message-exchange protocol (e.g.,incompatible with the NFC protocol) having signaling, authentication,and error detection and correction capabilities for interpretingmessages sent and received via the over-the-air communications. The NFCcircuit wirelessly communicates with a plurality of different types oflocal NFC readers using an NFC protocol that is different than the firstmessage-exchange protocol. Such NFC communications involve short-rangecommunications, such as a few centimeters (e.g., about 10 centimeters).The host processor communicates with remote transceivers via thewireless communication circuit, presents data pertaining to the localNFC readers to a user via the user interface, and communicates with theNFC circuit to provide authorization for communications with one of theNFC readers, based on user input received via the user interface. Eachsecure module communicates with a specific one of the different types oflocal NFC readers via the NFC circuit, using secure data stored withinthe secure module and inaccessible to the host circuit. Each securemodule communicates with a different one of the types of NFC readers,relative to the other secure modules. The routing circuit operates inresponse to an NFC communication by identifying one of the plurality ofsecond circuits that communicates with the specific type of the NFCreaders from which the NFC communication is received, and routes NFCcommunications between the specific one of the NFC readers and theidentified one of the plurality of secure modules, such as by using acommunication protocol specific to the NFC reader type. Such a protocolmay, for example, identify types of data to be communicated and themanner in which the data is to be communicated, to facilitateauthenticated NFC communications.

The routing circuit operates in one or more of a plurality of manners,to suit particular applications. In some embodiments, the routingcircuit accesses stored data in a routing table to identify a particularone of the secure modules to communicate with, using data in thereceived NFC communication. In a more specific embodiment in which eachof the secure modules stores at least one application data set that,when executed by the second circuit, causes the second circuit tocommunicate with the specific one of the local NFC readers, the routingcircuit stores routing table data that includes a list of respectiveapplications stored in the secure modules as well as locationinformation identifying the storage location of the respectiveapplications. In some implementations, the routing circuit storesrouting table data including one or more of: data indicating whether ornot an application is enabled (e.g., an application operated in thesecure module), a power type to use (e.g., RF power received via the NFCcircuit or internal battery power) for each application, and a priorityassociated with each application. Accordingly, the apparatus operatesusing one or more of these power types, to suit different embodiments.When another NFC communication is received from a different one of theNFC readers, the routing circuit identifies a different one of thesecure modules that communicates with the different one of the NFCreaders, and routes NFC communications between the different one of theNFC readers and the different one of the secure modules. In otherembodiments, the routing circuit is also operable to identify anapplication run by the host circuit based upon data in the NFCcommunication, and route data between the specific one of the NFCreaders and the first circuit for use by the identified application.

NFC communications as discussed herein may be effected using one or moreof a variety of types of circuits. For instance, some embodiments aredirected to an NFC circuit that can be inserted into one or more of avariety of devices, and communicate with circuits within the device. Incertain embodiments, an apparatus as discussed herein is used withand/or includes a portable hand-held device, with the host processoralso operating in and/or with the hand-held device for communicating viaover-the-air communications. In such applications, the NFC circuit andthe secure modules operate independently from the host circuit andprohibit access to the secure data via the host.

In the context of various example embodiments, a secure module, elementor component as discussed herein involves a circuit or circuits within adevice that maintain and/or generate at least some proprietary data towhich access is not provided for one or more of modification and use.Such data may involve, for example, a secure code that can be used byinternal circuitry within the device to facilitate communications withexternal circuits, or to enable the operation of certain functionswithin the device. In some implementations, a secure element/componentas described herein includes proprietary user data such as data that isused in transaction authorization with electronic payment. In otherimplementations, a secure element/component as described herein includesproprietary data used by circuitry within the device to operatefunctions, such as an applet, for a variety of implementations.

For general information regarding contactless communications, and forspecific information regarding one or more types of contactlesscommunications (e.g., as may be effected via different types of readermodules as discussed herein), reference may be made to the Europay,MasterCard and Visa company “Contactless Mobile Payment architecture,”chapter 7, Application choice; reference may also be made to the ISO/IEC7816 standard for contact cards, and to the ISO/IEC 14443 standard forcontactless cards, all of which are fully incorporated herein byreference. For example, one or more NFC routing apparatuses as describedherein operates to detect a “SELECT” function in an APDU correspondingto a communication between a reader device and an NFC device having asecure element, such as to facilitate contactless communications basedon the ISO14443-4 protocol (e.g., payment, transport, loyalty) by usingISO7816-4 APDUs to address applications over a contactless interface.Moreover, various embodiments are directed to NFC routing in connectionwith the NFC frontend integrated circuits PN544 and/or PN547 availablefrom NXP Semiconductors of Eindhoven, The Netherlands.

Turning now to the figures, FIG. 1 shows a NFC apparatus 100, whichroutes data between NFC reader devices and different secure modules, inaccordance with one or more example embodiments. The apparatus 100includes an NFC circuit 110 that communicates with a plurality of NFCreader types using NFC communications, with different types of NFCreader devices A-N shown by way of example. The apparatus 100 alsoincludes a plurality of secure modules 112-N, and a router 114 thatidentifies, and routes data to, a specific one of the secure modulesbased upon a type of the reader devices A-N from which NFCcommunications are received (e.g., based on the type of data and themanner in which the data is to be communicated). The apparatus 100 isalso shown including an optional wireless communication circuit 120 forover-the-air communications such as for cellular, Wi-Fi or othercommunication types. The apparatus 100 also includes a device/hostprocessor 130, and a user interface 140 (which may be omitted in certainembodiments). In some implementations, the device/host processor 130includes one or more modules that communicates with one of the differenttypes of local NFC readers A-N via the NFC circuit 110.

The NFC communications are effected at close range (e.g., within a fewcentimeters) using an NFC protocol that is different than protocols usedfor over-the-air communications at the wireless communication circuit120. Each secure module 112-N operates to communicate with a specificone of the reader devices, and uses stored data accessible by the securemodule and inaccessible (directly) by the device/host processor 130.This stored data may, for example, be stored within each secure module,or at another portion of the apparatus 100 with access limited to theappropriate secure module. In some implementations, each secure moduleincludes data that, when executed by the module, causes the module tocommunicate with the specific type of NFC reader device.

The apparatus 100 uses power from one or both of an internal batterysource (e.g., implemented at 130) and RF power received via the NFCcircuit 110. In some implementations, the NFC circuit 110 includes apower circuit that operates to use RF signals to generate internal powerin the apparatus 100. When RF power is used, the secure modules 112-Nand the router 114 may be powered for communications when the apparatus100 is otherwise not under local (e.g., battery) power.

In some embodiments, the router 114 uses stored routing table data toidentify one of the modules to which NFC communications are to berouted. In some implementations, the router 114 and/or another portionof the apparatus 100 also includes the stored routing table data.

FIG. 2 shows an NFC apparatus 200, in accordance another exampleembodiment. The apparatus 200 includes an NFC controller 210, a hostprocessor 220, and a plurality of secure elements 230, 232 and 234. TheNFC controller 210 includes a routing table 212 embedded therein, andlists enabled applications located in the host processor 220 and thesecure elements 230-234. These applications may, for example, includeapplications for effecting NFC communications with a specific localreader, such as for communicating payment data.

Each of the secure elements 230, 232 and 234 includes applications forcommunicating with a local reader using a specific type of communicationprotocol, and different from the types of communication protocols usedfor the other secure elements. For instance, a first protocol mayspecify communication procedures for effecting data communications for apayment transaction using a first payment host system, while a secondprotocol specifies communication procedures for effecting datacommunications for a payment transaction using a second payment systemthat is different from the first system.

The routing table 212 includes a list of all related applicationspresent in the apparatus 200, such as an application identification(AID) value and its location (e.g., by specifying the location of anapplication that, when executed via its secure element, facilitate NFCcommunications for a specific protocol type). In certainimplementations, the routing table 212 also includes one or more sets ofinformation as follows: an indication of whether or not an applicationis enabled, power modes supported by each application (e.g., low power,near-field/RF power, or power via the host apparatus), and applicationpriority.

Once the NFC controller 210 has identified a proper one of the secureelements 230, 232 and 234 (and, e.g., an application therein) toinitialize secure NFC communications with a local reader device, the NFCcontroller forwards data between the reader and the identified secureelement. In some implementations, the NFC controller 210 also identifiesa proper application for communication with the host processor 220.

FIGS. 3A-3B show an NFC apparatus 300 with respective routing states fordifferent current-host configurations, in accordance one or more exampleembodiments. The apparatus 300 may, for example, be implemented in amanner consistent with that described with the apparatus 200 in FIG. 2.In this context, the apparatus is similarly labeled with an NFCcontroller 310 having a routing table 312, a host processor 320, andsecure elements 330, 332 and 334. FIGS. 3A and 3B also show an externalreader device 340, which is part of the apparatus in certainembodiments.

Referring to FIG. 3B, the NFC controller 310 is in an operating state inwhich a default “current host” is selected as being secure element 332.In this state, NFC communications received and set from/to the externalreader device 340. This state may involve, for example, a user's defined“default” type of communication, such as for a primary credit card orother payment protocol by which the apparatus 300 effects secure NFCcommunications.

Referring to FIG. 3B, the NFC controller 310 is responsive to a selectfile command from the external reader device 340 by accessing therouting table 312 to identify an appropriate application and its host.By way of example, the secure element 334 is identified as a new currenthost for effecting NFC communications, and the NFC controller 310 passescommunications between the secure element 334 and the external readerdevice 340. For instance, when the NFC controller 310 receives anISO7816 “SELECT FILE” command-application protocol data unit (C-APDU),it retrieves the targeted host from the routing table, which becomes thenew “current host.” The NFC controller 310 then forwards all incomingC-APDUs (including this first one) from the antenna to the host, andforwards response APDUs (R-APDUs) from the host to the antenna. The NFCcontroller 310 continues this process until it receives a new “SELECTFILE” C-APDU which is then handled as the previous one.

FIG. 4 shows a method involving NFC communications, in accordance withanother example embodiment. This approach is amenable to implementationwith an NFC controller that monitors incoming communications from localreader devices, and routes data appropriately in accordance with arouting table, such as may be implemented in connection with FIGS. 3Aand 3B above. For instance, an NFC controller can monitor applicationprotocol data units (APDUs) received after an initialization (e.g.,ISO14443 as discussed below).

Beginning with block 410, if a new C-ADPU command is received, a routingtable is checked at block 420 to see if an appropriate AID is present inthe routing table. If the AID is present, the targeted host specifiedvia the AID is set as a current host at block 430. With this new currenthost established, the C-ADPU (and further communications) are forwardedto the current host at block 440. Further, responses (R-ADPU) from thecurrent host are forwarded to the local reader device at block 450.

When a new C-ADPU command is not received at block 410, such as whenoperating in an initial default state, the C-ADPU and R-ADPUcommunications are forwarded with a current host at blocks 440 and 450.Similarly, when AID is not present in the routing table at block 420,the communications are also routed via the current host at blocks 440and 450.

The various embodiments discussed herein are implemented with a varietyof different types of devices, to effect near field communications, suchas communications involving a secure element/component, for manyapplications. For instance, one or more embodiments are directed toimplementation with NFC-capable integrated circuits with mobile devicessuch as laptop computers, mobile telephones, tablets, and portable musicplayers. In some embodiments, a NFC frontend chip such as model PN544and/or PN547 (as discussed above) is used with a secure module such as aSmartMX contact interface controller, with an integrated circuitcomponent such as models PN65N or PN650, all available from NXPSemiconductors of Eindhoven, The Netherlands. A host device communicateswith the secure module, and the secure module executes secure functions(e.g., for communicating payment information), and can be operated suchthat it is not powered at all times and also communicates via RF power.Near-field communications are effected using this approach, such as forthe communication of contactless ID information, for establishingnetwork presence, or other near-field (e.g., within a few centimeters)communication. These near-field communications can also effected foroperation in various power states (e.g., normal/full power, low batterymode and passive modes (e.g., powered via RF)).

Various modules may be implemented to carry out one or more of theoperations and activities described herein and/or shown in the figures.In these contexts, a “module” is a circuit that carries out one or moreof these or related operations/activities (e.g., validating PINs,storing ID data, storing configuration data, and others). For example,in certain of the above-discussed embodiments, one or more modules arediscrete logic circuits or programmable logic circuits configured andarranged for implementing these operations/activities, as in the circuitmodules shown in one or more of FIGS. 1-3B. Such modules may, forexample, be implemented as part of a portable device such as a mobiletelephone. In certain embodiments, such a programmable circuit is one ormore computer circuits programmed to execute a set (or sets) ofinstructions (and/or configuration data). The instructions (and/orconfiguration data) can be in the form of firmware or software stored inand accessible from a memory (circuit). As an example, certain modulesinclude a combination of a CPU hardware-based circuit and a set ofinstructions in the form of firmware. In such an example, a first modulemay include a CPU hardware circuit with one set of instructions and asecond module may include a second CPU hardware circuit (or the same CPUhardware circuit) with another set of instructions. Such modules mayfurther implement circuit structures and/or functions as described inthe above-referenced components available from NXP Semiconductors.

Certain embodiments are directed to a computer program product (e.g.,nonvolatile memory device), which includes a machine orcomputer-readable medium having stored thereon instructions which may beexecuted by a computer (or other electronic device) to performoperations/activities as described herein.

Based upon the above discussion and illustrations, those skilled in theart will readily recognize that various modifications and changes may bemade to the various embodiments without strictly following the exemplaryembodiments and applications illustrated and described herein. Forexample, different types of host devices can be implemented with asecure component/module as discussed herein. As another example, certainembodiments are directed to an apparatus having two or more secureelements in which at least one of the secure elements operates tocommunicate with two or more different types of reader modules. Suchmodifications do not depart from the true spirit and scope of variousaspects of the invention, including aspects set forth in the claims.

The invention claimed is:
 1. An apparatus comprising: a wirelesscommunication circuit configured and arranged to send and receiveover-the-air communications using a first message-exchange protocolhaving signaling, authentication, and error detection and correctioncapabilities for interpreting messages sent and received via theover-the-air communications; a near-field communication (NFC) circuitconfigured and arranged to wirelessly communicate with a plurality ofdifferent types of local NFC readers using a second NFC protocol that isdifferent than the first message-exchange protocol; a user interfaceconfigured and arranged to present data to a user of the apparatus; afirst circuit configured and arranged to communicate with remotetransceivers via the wireless communication circuit; a plurality ofsecond circuits, each second circuit configured and arranged tocommunicate with a specific one of the different types of local NFCreaders via the NFC circuit, using secure data stored within the secondcircuit and inaccessible to the first circuit, different ones of thesecond circuits being configured and arranged to communicate withdifferent ones of the types of NFC readers; and a routing circuitconfigured and arranged to, in response to an NFC communication receivedfrom a specific one of the NFC readers, identify one of the plurality ofsecond circuits that is configured and arranged to communicate with thespecific one of the NFC readers, and route NFC communications betweenthe specific one of the NFC readers and the identified one of theplurality of second circuits, such that the first circuit is furtherconfigured and arranged to present data pertaining to the local NFCreaders to a user via the user interface, and to communicate with theNFC circuit to provide an authorization for communications with one ofthe NFC readers in response to a user input received via the userinterface, wherein the routing circuit is configured and arranged toidentify the one of the plurality of second circuits by accessing storeddata in a routing table, and by using the stored data together with datain the NFC communication to identify the one of the plurality of secondcircuits, wherein each of the second circuits stores at least oneapplication data set that, when executed by the second circuit, causesthe second circuit to communicate with the specific one of the local NFCreaders, and the routing circuit stores the routing table data, therouting table data including a list of respective applications stored inthe respective second circuits, and location information identifying thestorage location of the respective applications, wherein the routingcircuit stores routing table data including at least one of the dataindicating whether or not an application is enabled, at least one of theRF power and internal battery power modes supported by each application,and a priority associated with each application.
 2. The apparatus ofclaim 1, wherein each second circuit is configured and arranged tocommunicate with a specific one of the different types of local NFCreaders by communicating using a communication protocol specific to theNFC reader type.
 3. The apparatus of claim 1, wherein each communicationprotocol specific to one of the NFC readers includes a protocol thatidentifies types of data to be communicated and the manner in which thedata is to be communicated, to facilitate authenticated NFCcommunications.
 4. The apparatus of claim 1, wherein the firstmessage-exchange protocol is incompatible with the NFC protocol.
 5. Theapparatus of claim 1, wherein the wireless communication circuit isconfigured and arranged to send and receive over-the-air communicationsincluding at least one of: Wi-Fi communications, cellular telephonecommunications, Bluetooth communications, and satellite communications,and the NFC circuit is configured and arranged with a limitedcommunication range of less than 10 centimeters.
 6. The apparatus ofclaim 1, wherein the apparatus is a portable hand-held device and thefirst circuit is a processor that operates the portable hand-held devicefor communicating via over-the-air communications, and the NFC circuitand the second circuits operate independently from the first circuit andare configured and arranged to prohibit access to the secure data viathe first circuit.
 7. The apparatus of claim 1, wherein the NFC circuit,the second circuits and the routing circuits are configured and arrangedto operate using wireless radio frequency power received via the NFCcircuit.
 8. The apparatus of claim 1, wherein the routing circuit isconfigured and arranged to, in response to the NFC communication,identify an application run by the first circuit based upon data in theNFC communication, and route data between the specific one of the NFCreaders and the first circuit for use by the identified application. 9.The apparatus of claim 1, wherein the routing circuit is configured andarranged to, in response to a second NFC communication received from adifferent one of the NFC readers, identify a different one of theplurality of second circuits that is configured and arranged tocommunicate with the different one of the NFC readers, and route NFCcommunications between the different one of the NFC readers and thedifferent one of the plurality of second circuits.
 10. An apparatuscomprising: a near-field communication (NFC) circuit configured andarranged to wirelessly communicate with a plurality of different typesof local NFC readers using an NFC protocol; a host circuit having atleast one first module that is configured and arranged to communicatewith one of the different types of local NFC readers via the NFCcircuit; a plurality of second modules, each second module beingconfigured and arranged to communicate with a specific one of thedifferent types of local NFC readers via the NFC circuit using securedata that is stored within the second module and inaccessible by thehost circuit, different ones of the second modules being configured andarranged to communicate with different types of the NFC readers; and arouting circuit configured and arranged to, in response to an NFCcommunication received from a specific one of the NFC readers, identifyone of the first and second modules that is configured and arranged tocommunicate with the specific one of the NFC readers, and route NFCcommunications between the specific one of the NFC readers and theidentified one of the modules, characterized in that the routing circuitis configured and arranged to identify the one of the first and secondmodules by accessing stored data in a routing table, and by using thestored data together with data in the NFC communication to identify theone of the first and second modules, wherein each of the first andsecond modules stores at least one application data set that, whenexecuted by the first or second module, causes the first or secondmodule to communicate with the specific one of the local NFC readers,and the routing circuit stores the routing table data, the routing tabledata including a list of respective applications stored in therespective first and second modules, and location informationidentifying the storage location of the respective applications, whereinthe routing circuit stores routing table data including at least one ofthe data indicating whether or not an application is enabled, at leastone of the RF power and internal battery power modes supported by eachapplication, and a priority associated with each application.
 11. Theapparatus of claim 10, wherein each module is configured and arranged tocommunicate with a specific one of the different types of local NFCreaders according to a communication protocol specific to the NFC readertype and identifies types of data to be communicated and the manner inwhich the data is to be communicated.
 12. The apparatus of claim 10,further including routing table data stored in the apparatus, whereinthe routing circuit is configured and arranged to identify the one ofthe first and second modules by accessing and using the routing tabledata with data in the NFC communication to identify the module.
 13. Theapparatus of claim 10, wherein each of the modules stores at least oneapplication data set that, when executed by the module, causes themodule to communicate with the specific type of the local NFC readers.14. The apparatus of claim 10, further including a power circuitconfigured and arranged to provide power to the apparatus using radiofrequency energy received via the NFC circuit, wherein the secondmodules are configured and arranged to communicate with the specific oneof the different types of local NFC readers using the provided power.15. A method for use with an apparatus, said apparatus comprising: anear-field communication (NFC) circuit configured and arranged towirelessly communicate with a plurality of different types of local NFCreaders using an NFC protocol; a host circuit having at least one firstmodule that is configured and arranged to communicate with one of thedifferent types of local NFC readers via the NFC circuit; a plurality ofsecond modules, each second module being configured and arranged tocommunicate with a specific one of the different types of local NFCreaders via the NFC circuit using secure data that is stored within thesecond module and inaccessible by the host circuit, different ones ofthe second modules being configured and arranged to communicate withdifferent types of the NFC readers; and a routing circuit configured andarranged to, in response to an NFC communication received from aspecific one of the NFC readers, identify one of the first and secondmodules that is configured and arranged to communicate with the specificone of the NFC readers, and route NFC communications between thespecific one of the NFC readers and the identified one of the modules;the method being characterized in that: the routing circuit identifiesthe one of the first and second modules by accessing stored data in arouting table, and by using the stored data together with data in theNFC communication to identify the one of the first and second modules,each of the first and second modules stores at least one applicationdata set that, when executed by the first or second module, causes thefirst or second module to communicate with the specific one of the localNFC readers, and the routing circuit stores the routing table data, therouting table data including a list of respective applications stored inthe respective first and second modules, and location informationidentifying the storage location of the respective applications, whereinthe routing circuit stores routing table data including at least one ofdata indicating whether or not an application is enabled, at least oneof RF power and internal battery power modes supported by eachapplication, and a priority associated with each application.